| 1 | variable "subscription_id" { |
| 2 | type = string |
| 3 | description = "Expected Azure subscription ID." |
| 4 | } |
| 5 | |
| 6 | variable "tenant_id" { |
| 7 | type = string |
| 8 | description = "Expected Azure tenant ID." |
| 9 | } |
| 10 | |
| 11 | variable "location" { |
| 12 | type = string |
| 13 | description = "Azure region." |
| 14 | } |
| 15 | |
| 16 | variable "project_name" { |
| 17 | type = string |
| 18 | description = "Project resource prefix." |
| 19 | default = "ai-investment-platform" |
| 20 | } |
| 21 | |
| 22 | variable "workload_identity_namespace" { |
| 23 | type = string |
| 24 | description = "Kubernetes namespace used by the Helm release." |
| 25 | default = "ai-investment" |
| 26 | } |
| 27 | |
| 28 | variable "workload_identity_service_account" { |
| 29 | type = string |
| 30 | description = "ServiceAccount name configured in the Azure Helm values." |
| 31 | default = "ai-investment-platform" |
| 32 | } |
| 33 | |
| 34 | variable "aks_private_cluster_enabled" { |
| 35 | type = bool |
| 36 | description = "Enable only after private DNS and operator connectivity have been designed." |
| 37 | default = false |
| 38 | } |
| 39 | |
| 40 | variable "aks_local_account_disabled" { |
| 41 | type = bool |
| 42 | description = "Enable after Entra Kubernetes RBAC administrators are configured." |
| 43 | default = false |
| 44 | } |